Current File : //proc/3/root/lib/python2.7/site-packages/firewall/core/rich.pyo
�
�c�`c @ s d d d d d d d d d d d
d d d
d d d d g Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d e
f d � � YZ d e
f d � � YZ d e
f d � � YZ
d e
f d � � YZ d e f d � � YZ d e
f d � � YZ d e
f d � � YZ d e
f d � � YZ d e
f d � � YZ d e
f d! � � YZ d
e
f d" � � YZ d e
f d# � � YZ d e
f d$ � � YZ d
e
f d% � � YZ d e f d& � � YZ d e
f d' � � YZ d e
f d( � � YZ d e
f d) � � YZ d* S(+ t Rich_Sourcet Rich_Destinationt Rich_Servicet Rich_Portt
Rich_Protocolt Rich_Masqueradet Rich_IcmpBlockt
Rich_IcmpTypet Rich_SourcePortt Rich_ForwardPortt Rich_Logt
Rich_Auditt Rich_Acceptt Rich_Rejectt Rich_Dropt Rich_Markt
Rich_Limitt Rich_Rulei����( t functions( t check_ipset_name( t REJECT_TYPES( t errors( t
FirewallErrorc B s e Z e d � Z d � Z RS( c C s� | | _ | j d k r$ d | _ n | | _ | j d k sK | j d k rW d | _ n$ | j d k r{ | j j � | _ n | | _ | j d k r� d | _ n | | _ | j d k r� | j d k r� | j d k r� t t j d � � n d S( Nt s no address, mac and ipset( t addrt Nonet mact uppert ipsett invertR R t INVALID_RULE( t selfR R R R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt __init__$ s - c C s� d | j r d n d } | j d k r7 | d | j S| j d k rU | d | j S| j d k rs | d | j St t j d � � d S( Ns source%s s NOTR s address="%s"s mac="%s"s
ipset="%s"s no address, mac and ipset( R R R R R R R R ( R t ret( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt __str__5 s ( t __name__t
__module__t FalseR R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR # s c B s e Z e d � Z d � Z RS( c C s | | _ | | _ d S( N( R R ( R R R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR B s c C s d | j r d n d | j f S( Ns destination %saddress="%s"s not R ( R R ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" F s ( R# R$ R% R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR A s c B s e Z d � Z d � Z RS( c C s
| | _ d S( N( t name( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR K s c C s d | j S( Ns service name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" N s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR J s c B s e Z d � Z d � Z RS( c C s | | _ | | _ d S( N( t portt protocol( R R' R( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR R s c C s d | j | j f S( Ns port port="%s" protocol="%s"( R' R( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" V s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Q s c B s e Z d � Z RS( c C s d | j | j f S( Ns# source-port port="%s" protocol="%s"( R' R( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" Z s ( R# R$ R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR Y s c B s e Z d � Z d � Z RS( c C s
| | _ d S( N( t value( R R) ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR _ s c C s d | j S( Ns protocol value="%s"( R) ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" b s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR ^ s c B s e Z d � Z d � Z RS( c C s d S( N( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR f s c C s d S( Nt
masquerade( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" i s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR e s c B s e Z d � Z d � Z RS( c C s
| | _ d S( N( R& ( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR m s c C s d | j S( Ns icmp-block name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" p s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR l s c B s e Z d � Z d � Z RS( c C s
| | _ d S( N( R& ( R R& ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR t s c C s d | j S( Ns icmp-type name="%s"( R& ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" w s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR s s c B s e Z d � Z d � Z RS( c C s^ | | _ | | _ | | _ | | _ | j d k r? d | _ n | j d k rZ d | _ n d S( NR ( R' R( t to_portt
to_addressR ( R R' R( R+ R, ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR { s c C sR d | j | j | j d k r+ d | j n d | j d k rJ d | j n d f S( Ns( forward-port port="%s" protocol="%s"%s%sR s
to-port="%s"s
to-addr="%s"( R' R( R+ R, ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s ( R# R$ R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR z s c B s# e Z d d d d � Z d � Z RS( c C s | | _ | | _ | | _ d S( N( t prefixt levelt limit( R R- R. R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C sS d | j r d | j n d | j r2 d | j n d | j rK d | j n d f S( Ns log%s%s%ss prefix="%s"R s level="%s"s %s( R- R. R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
� s c B s e Z d d � Z d � Z RS( c C s
| | _ d S( N( R/ ( R R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C s d | j r d | j n d S( Ns audit%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c B s e Z d d � Z d � Z RS( c C s
| | _ d S( N( R/ ( R R/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C s d | j r d | j n d S( Ns accept%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s N( R# R$ R R R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c B s) e Z d d d � Z d � Z d � Z RS( c C s | | _ | | _ d S( N( t typeR/ ( R t _typeR/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C s: d | j r d | j n d | j r2 d | j n d f S( Ns
reject%s%ss
type="%s"R s %s( R0 R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s c C s | j r{ | s$ t t j d � � n | d k r{ | j t | k r{ d j t | � } t t j d | j | f � � q{ n d S( Ns9 When using reject type you must specify also rule family.t ipv4t ipv6s , s% Wrong reject type %s.
Use one of: %s.( R2 R3 ( R0 R R R R t join( R t familyt valid_types( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt check� s N( R# R$ R R R" R7 ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
� s c B s e Z d � Z RS( c C s d | j r d | j n d S( Ns drop%ss %sR ( R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s ( R# R$ R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c B s& e Z d d � Z d � Z d � Z RS( c C s | | _ | | _ d S( N( t setR/ ( R t _setR/ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C s' d | j | j r d | j n d f S( Ns
mark set=%s%ss %sR ( R8 R/ ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s c C s� | j d k r | j } n t t j d � � d | k r� | j d � } t | � d k ro t t j | � � n t j | d � s� t j | d � r� t t j | � � q� n$ t j | � s� t t j | � � n d S( Ns no value sett /i i i ( R8 R R R t INVALID_MARKt splitt lenR t checkUINT32( R t xt splits( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 � s N( R# R$ R R R" R7 ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c B s, e Z d � Z d � Z d � Z d � Z RS( c C su | | _ d | j k rq | j j d � } t | � d k rq | d d
k rq d | d | d d f | _ qq n d S( NR: i i t secondt minutet hourt days %s/%si ( RA RB RC RD ( R) R< R= ( R R) R@ ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s c C s� d } d | j k r* | j j d � } n | sC t | � d k r[ t t j | j � � n | \ } } y t | � } Wn t t j | j � � n X| d k s� | d k r� t t j | j � � n d } | d k r� d } n? | d k r� d } n* | d k r d } n | d k r d } n d
| | d k rPt t j d | j � � n | d k r�| d k r�t t j d
| j � � n d S( NR: i i t st mt ht di< i i' i s %s too fasts %s too slow( RE RF RG RH i i� i�Q ( R R) R< R= R R t
INVALID_LIMITt int( R R@ t ratet durationt mult( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 � s6 c C s d | j S( Ns limit value="%s"( R) ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" s c C s d S( NR ( ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt command s ( R# R$ R R7 R" RN ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR � s " c B s; e Z d d d � Z d � Z d � Z d � Z d � Z RS( c C sw | d k r t | � | _ n d | _ d | _ d | _ d | _ d | _ d | _ d | _ | rs | j | � n d S( N(
R t strR5 t sourcet destinationt elementt logt auditt actiont _import_from_string( R R5 t rule_str( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR
s c C s� g } x� t j | � D]� } d | k r� | j d � } t | � d k s_ | d s_ | d rx t t j d | � � n | j i | d d 6| d d 6� q | j i | d 6� q W| j i d d 6� | S(
s Lexical analysis t =i i i s internal error in _lexer(): %st attr_namet
attr_valueRR t EOL( R t splitArgsR< R= R R R t append( R RW t tokenst rt attr( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt _lexer s ( &c C s�
| s t t j d � � n d | _ d | _ d | _ d | _ d | _ d | _ d | _
| j | � } | r� | d j d � d k r� t t j d � � n i } g } d } x
| | j d � d k o� | d g k s�
| | j d � } | | j d � } | | j d � } | rA| d? k r|t t j d | � � q|n;| d@ k rf| d k rw| j rwt t j d) � � q|| d k r�| j r�t t j d* � � q|| dA k r�| j r�t t j d+ | | j f � � q|| d k r| j rt t j d, � � q|| d! k r,| j r,t t j d- � � q|| dB k r|| j
r|t t j d. | | j
f � � q|n t t j d/ | � � t
| � d k r�| t
| � d0 n d1 } | d1 k r<| r| r| d k r�t t j d2 � � q9t t j d3 | | f � � q�
d | k r,t t j d4 | | f � � q�
| j d � nx| d k r�| d k r�| dC k ryt t j d7 | � � n | | _ q�
| r�| d k r�d8 }
n d9 | | f }
t t j |
� � q�
| j | � n�| d k rs| dD k r�| | | <q�
| dE k rt | d <q�
t | j d � | j d
� | j d � | j d t � � | _ | j � | j � | d0 } nA| d k r�| dF k r�| | | <q�
| dG k r�t | d <q�
t | j d � | j d � � | _ | j � | j � | d0 } n�| d k r?| d
k r*t | � | _ | j � q�
t t j d: � � nu| d k r�| d k rst | � | _ | j � q�
t t j d; � � n,| d k r�| dH k r�| | | <q�
t | j d � | j d � � | _ | j � | j � | d0 } n�| d k r;| d k r&t | � | _ | j � q�
t t j d< � � ny| d k r�| d k rot | � | _ | j � q�
t t j d= � � n0| d k r�t � | _ | j � | j � | d0 } n�| d k r?| dI k r�| | | <q�
t | j d � | j d � | j d � | j d � � | _ | j � | j � | d0 } nu| d k r�| dJ k rd| | | <q�
t | j d � | j d � � | _ | j � | j � | d0 } n | d k r;| dK k r�| | | <q�
| d& k r�| j d& � q�
t | j d � | j d � | j d& � � | _ | j � | j � | d0 } ny| d! k r�| d& k rc| j d& � q�
t | j d& � � | _ | j � | j � | d0 } n| d" k r�| d& k r�| j d& � q�
t | j d& � � | _
| j � | j � | d0 } n�| d# k r^ | d& k r% | j d& � q�
t | j d& � � | _
| j � | j � | d0 } nV| d$ k r� | d k r� | | | <q�
| d& k r� | j d& � q�
t! | j d � | j d& � � | _
| j � | j � | d0 } n� | d% k rj
| d k r
| | | <q�
| d& k r%
| j d& � q�
t" | j d � | j d& � � | _
| j � | j � | d0 } nJ | d& k r�
| d
k r�
t# | � | d& <| j � q�
t t j d> � � n | d0 } q� W| j$ � d S(L Ns
empty rulei RR R[ t ruleRY RZ R5 t addressR R R R) R' R( s to-ports to-addrR& R- R. R0 R8 s bad attribute '%s'RP RQ t services
icmp-blocks icmp-typeR* s forward-ports source-portRS RT t acceptt dropt rejectt markR/ t nott NOTs more than one 'source' elements# more than one 'destination' elementsF more than one element. There cannot be both '%s' and '%s' in one rule.s more than one 'log' elements more than one 'audit' elementsO more than one 'action' element. There cannot be both '%s' and '%s' in one rule.s unknown element %si R s0 'family' outside of rule. Use 'rule family=...'.s: '%s' outside of any element. Use 'rule <element> %s= ...'.s, '%s' outside of rule. Use 'rule ... %s ...'.R2 R3 sH 'family' attribute cannot have '%s' value. Use 'ipv4' or 'ipv6' instead.sd wrong 'protocol' usage. Use either 'rule protocol value=...' or 'rule [forward-]port protocol=...'.sD attribute '%s' outside of any element. Use 'rule <element> %s= ...'.s invalid 'protocol' elements invalid 'service' elements invalid 'icmp-block' elements invalid 'icmp-type' elements invalid 'limit' element( s familyRc s macs ipsets inverts values ports protocols to-ports to-addrs names prefixs levels types set( Rb s sources destinations protocolRd s ports
icmp-blocks icmp-types
masquerades forward-ports source-ports logs auditRe Rf Rg s marks limitRi Rj s EOL( s protocolRd s ports
icmp-blocks icmp-types
masquerades forward-ports source-port( Re Rf Rg s mark( s ipv4s ipv6( Rc s macs ipsets invert( Ri Rj ( Rc s invert( Ri Rj ( s ports protocol( s ports protocols to-ports to-addr( s ports protocol( s prefixs level(% R R R R R5 RP RQ RR RS RT RU Ra t getR= R] t TrueR R% t popt clearR R R R R R R R R R
R R R R
R R R7 ( R RW R^ t attrst in_elementst indexRR RY RZ t
in_elementt err_msg( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyRV . st + "%,
?
$
$
<
$
0
$
c C s� | j d k r6 | j d k r6 t t j | j � � n | j d k r� | j d k rf | j j d k su | j d k r� t t j � � n t | j
� t k r� t t j � � q� n | j
d k r| j d k r� t t j
d � � n | j d k r| j d k rt t j
d � � qn t | j
� t t t g k r}| j d k r}| j d k r}| j d k r}t t j
d � � q}n | j d k r| j j d k rL| j d k r�t t j � � n | j j d k r�t t j
d � � n | j j d k r
t t j
d � � n t j | j | j j � st t j t | j j � � � qq| j j d k r�| j j d k r�t t j
d � � n t j | j j � st t j t | j j � � � qq| j j d k rt | j j � st t j t | j j � � � qqt t j
d � � n | j d k r�| j d k rKt t j � � n | j j d k syt j | j | j j � r�t t j t | j j � � � q�n t | j
� t k r | j
j d k s�t | j
j � d
k r>t t j t | j
j � � � q>n>t | j
� t k rut j! | j
j" � sEt t j# | j
j" � � n | j
j$ d k r>t t j% | j
j$ � � q>n�t | j
� t& k r�t j' | j
j( � s>t t j% | j
j( � � q>n�t | j
� t k r/| j d k r�t t j
d � � n | j d k r>| j j d k r>t t j
d � � q>nt | j
� t k r�| j
j d k snt | j
j � d
k r�t t j) t | j
j � � � n | j r>t t j
d � � q>n�t | j
� t* k r| j
j d k s�t | j
j � d
k r>t t j) t | j
j � � � q>n+t | j
� t k r�t j! | j
j" � sXt t j# | j
j" � � n | j
j$ d k r�t t j% | j
j$ � � n | j
j+ d k r�| j
j, d k r�t t j# | j
j+ � � n | j
j+ d k rt j! | j
j+ � rt t j# | j
j+ � � n | j
j, d k rPt j- | j | j
j, � rPt t j | j
j, � � n | j d k rqt t j � � n | j d k r>t t j
d � � q>n� t | j
� t. k r
t j! | j
j" � s�t t j# | j
j" � � n | j
j$ d k r>t t j% | j
j$ � � q>n1 | j
d k r>t t j
d t | j
� � � n | j d k r�| j j/ r�| j j/ d! k r�t t j0 | j j/ � � n | j j1 d k r�| j j1 j2 � q�n | j d k r! t | j � t3 t4 t5 g k r�t t j6 t | j � � � n | j j1 d k r! | j j1 j2 � q! n | j d k r� t | j � t4 k r[ | j j2 | j � n% t | j � t7 k r� | j j2 � n | j j1 d k r� | j j1 j2 � q� n d S(" NR2 R3 s no element, no actions% no element, no source, no destinations no action, no log, no audits address and macs address and ipsets
mac and ipsets invalid sourcei t tcpt udpt sctpt dccps masquerade and actions masquerade and mac sources icmp-block and actionR s forward-port and actions Unknown element %st emergt alertt critt errort warningt noticet infot debug( s ipv4s ipv6( Rt Ru Rv Rw ( Rt Ru Rv Rw ( Rt Ru Rv Rw ( Rx Ry Rz s errorR| R} s infos debug(8 R5 R R R t INVALID_FAMILYRP R RQ t MISSING_FAMILYR0 RR R RU R R R RS RT R R R t
check_addresst INVALID_ADDRRO t check_mact INVALID_MACR t
INVALID_IPSETR R& R= t INVALID_SERVICER t
check_portR' t INVALID_PORTR( t INVALID_PROTOCOLR t
checkProtocolR) t INVALID_ICMPTYPER R+ R, t check_single_addressR R. t INVALID_LOG_LEVELR/ R7 R R
R t INVALID_AUDIT_TYPER ( R ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR7 s� ! $$$ $*$ !*! *$$ c C s� d } | j r# | d | j 7} n | j r@ | d | j 7} n | j r] | d | j 7} n | j rz | d | j 7} n | j r� | d | j 7} n | j r� | d | j 7} n | j r� | d | j 7} n t j r� t j | � S| S( NRb s family="%s"s %s(
R5 RP RQ RR RS RT RU R t PY2t u2b( R R! ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR" � s N( R# R$ R R Ra RV R7 R" ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyR s
� �N( t __all__t firewallR t firewall.core.ipsetR t firewall.core.baseR R t firewall.errorsR t objectR R R R R R R R R R R
R R R
R R R R ( ( ( s6 /usr/lib/python2.7/site-packages/firewall/core/rich.pyt <module> s8
1
Mini Shell